AMENDMENTS TO THE CLAIMS 



1. (Currently Amended) A system for supporting a messaging service, comprising: 
a first translation gateway that is adminiotcrcd by a customer of tho messaging 

Dorvico for use between (a) a customer data network that is accessed, by those 
authorized by the customer, to receive a message via a client process, and (b) a hostile 
data network, 

the first translation gateway having translation functionality that is applied to a 
plurality of inbound messages, arriving via a -the hostile network, in a manner that is 
transparent to recipients of said inbound messages who experience the messages via a 
plurality of client processes running in the customer network, 

the first translation gateway having translation functionality that is applied to 
outbound messages, originating with the plurality of client processes in the customer 
network, in a manner that is transparent to users of the plurality of client processes, 
wherein the first translation gateway is designed to verify that accounts of the users are 
current in response to obtaining outbound messages; and 

a second translation gateway for use between 

(a) the hostile data network, and 

(b) a service provider network of a provider of said messaging service, 
wherein said service provider network implements a distributed an interface to a 
telephony network from which the inbound messages originate, the second 
translation gateway to forward the inbound messages to the first translation 
gateway through the hostile network in a manner that precludes unauthorized 
access to the content of the inbound messages. 

2. (Canceled). 

3. (Currently Amended) The system of claim 1 wherein the second translation 
gateway is administered by the custome r provider of the messaging service . 

4. (Previously Presented) The system of claim 3 wherein the hostile data network is 
the Internet. 
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5. (Original) The system of claim 4 wherein the inbound messages originate as 
facsimile messages. 

6. (Original) The system of claim 4 wherein the inbound messages originate as 
voice messages. 

7. (Previously Presented) The system of claim 1 wherein the first translation 
gateway and the second translation gateway are nodes of a virtual private network 
(VPN) so that the inbound messages can be passed between the first and second 
gateways through a VPN tunnel. 

8. (Previously Presented) The system of claim 1 wherein the second gateway is to 
use public keys to encrypt the inbound messages before sending them to the first 
gateway via the hostile network, and the first gateway is to use private keys to decrypt 
the inbound messages prior to forwarding them to the plurality of client processes. 

9. (Previously Presented) The system of claim 1 wherein the outbound messages 
are addressed to the service provider network, and wherein the first translation 
gateway is designed to then forward the outbound messages to the second translation 
gateway through the hostile data network. 

10. (Currently Amended) The system of claim 1 wherein the outbound messages are 
addressed to outbound, circuit switched network addresses, and contain one of voice 
and facsimile data, the service provider network implements a diotributod an interface 
to a telephony network for transmitting the outbound messages to the their outbound, 
circuit switched network addresses. 

11. (Previously Presented) The system of claim 1 wherein Internet Protocol (IP) 
addresses for nodes in the service provider network are assigned by the service 
provider and not by the customer, and IP addresses for nodes in the customer data 
network are assigned by the customer and not by the service provider. 

12. (Original) The system of claim 1 wherein the first and second translation 
gateways are to exchange a set of security certificates, wherein all of the plurality of 
inbound messages, received on behalf of a given corporate customer over a plurality of 
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different circuit-switched network addresses, respectively, are encrypted by the second 
translation gateway using the set of certificates. 

13. (Currently Amended) A system for supporting a messaging service, comprising: 
a first translation gateway for use between a) a customer data network that is 

administered by a customer of the messaging service and not by a provider of the 
messaging service and b) a hostile data network; and 

a second translation gateway for use between a) the hostile data network and b) 
a service provider network that is administered by the provider and not by the 
customer, 

wherein the service provider network implements a diotributed an interface to a 
telephony network into which a message, that originates in the customer data network 
and arrives via the first translation gateway and the hostile network, is transmitted by 
the interface, 

the first translation gateway having translation functionality that is 
applied to a plurality of outbound messages originating from a plurality of client 
processes in the customer network, in a manner that is transparent to users of 
said plurality of client processes, the plurality of outbound messages being 
addressed to the service provider network, 

the first translation gateway being designed to then forward the plurality 
of outbound messages to the second translation gateway through the hostile data 
network, and 

the first translation gateway being designed to verify that accounts of 
users are current in response to obtaining outbound messages. 

14. (Original) The system of claim 13 wherein the first and second gateways are 
administered by the customer and not by the service provider. 

15. (Original) The system of claim 13 wherein the first gateway is administered by 
the customer and not the service provider, while the second gateway is administered by 
the service provider and not the customer. 

16. (Original) The system of claim 14 wherein the message that is to be transmitted 
by the interface is a facsimile message. 
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17. (Original) The system of claim 15 wherein the message that is to be transmitted 
by the interface a facsimile message. 



18. (Original) The system of claim 13 wherein the plurality of client processes are 
associated with a plurality of different, customer-authorized users of said processes, 
respectively, 

and wherein the translation functionality applied to the outbound messages by 
the first gateway includes an encryption key that is used to encrypt every one of the 
plurality of outbound messages which are addressed to the service provider network. 

19. (Original) The system of claim 13 wherein the plurality of outbound messages 
have been addressed to circuit-switched network addresses of the telephony network, 
before they arrive at the first gateway. 

20. (Previously Presented) A method for providing a secure messaging service, 
comprising: 

assigning a separate set of circuit switched network addresses to each of a 

plurality of corporate subscribers of the messaging service, some of the sets of circuit 

switched network addresses being in different countries; 

associating the set of circuit switched network addresses for each subscriber with 

an internet domain of said subscriber- 
receiving one of a) an inbound fax message and b) an inbound voice message 

that has been addressed to one of the set of circuit switched network addresses of a 

given subscriber; 

transferring the inbound message to a first translation gateway that is configured 
to service the given subscriber, wherein the inbound message is addressed to the 
internet domain of the given subscriber; 

sending the inbound message from the first translation gateway to a predefined 
port of a second translation gateway in a privacy-maintaining manner over a hostile 
data network of which the first and second translation gateways are separate nodes, 
wherein the second translation gateway is administered by the given subscriber and is 
to forward the inbound message to an affiliate of the given subscriber over an internal 
data network of the given subscriber of which the second translation gateway is a node; 
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obtaining an outbound message at the first translation gateway, wherein the 
outbound message originated with an affiliate of the given subscriber and was 
addressed to an internet domain of a provider of the messaging service with whom the 
given subscriber has a service contract for secure messaging services, the outbound 
message having been transferred by the second translation gateway to the first 
translation gateway in a privacy-maintaining manner over the hostile data network; 

verifying that an account of the given subscriber is current, in response to 
obtaining the outbound message; and 

forwarding the outbound message by the first translation gateway to an 
outbound resource of the service provider over an internal data network of the service 
provider of which the first translation gateway and the outbound resource are separate 
nodes, wherein the outbound resource is capable of translating the outbound message 
into a format that can be transmitted to one of a) a facsimile machine and b) a telephone 
unit, over a telephony network. 

21. (Original) The method of claim 20 wherein the receipt of the inbound message 
and the transfer of the inbound message occur in an internal data network of a provider 
of the messaging system. 

22. (Currently Amended) The method of claim 21 wherein the second translation 
gateway is to forward the inbound message to the affiliate via an email server that is a 
node of the given subscriber's internal data network. 

23. (Canceled). 

24. (Currently Amended) A method for operating a message delivery service, 
comprising: 

associating a separate set of data network source address names to each of a 
plurality of different group subscribers of the message delivery service, wherein each 
group subscriber has entered into a service contract with a service provider of the 
message delivery service; 

instructing a given one of the plurality of different g roup subscribers to 
configure a first translation gateway,, administered by the given group subscriber, so 
that the first gateway applies a translation function to any outbound message that 
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originates in an internal data network of the given group subscriber and that is 
addressed to a specified internet domain of the service provider, the translation 
function being deoigned to ensure privacy of an outbound message as it travels through 
a hostile data network; 

verifying that an account of the given group subscriber is current in response to 
receiving an outbound message that originated in the internal data network of the given 
group subscriber and that traveled through the hostile data network before arriving at a 
second translation gateway; and 

forwarding the received outbound message from the second translation gateway 
to an outbound resource, wherein the second translation gateway and the outbound 
resource are different nodes of an internal data network of the service provider, and 
wherein the outbound resource is to transmit the received outbound message to a 
circuit-switched network address of a recipient. 

25. (Original) The method of claim 24 further comprising: 

instructing the given group subscriber to further address any outbound message 
that originates in its internal data network and that is addressed to the specified, 
internet domain of the service provider, to a circuit-switched network address of a 
recipient. 

Claims 26-35 (Canceled). 
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